skills/openaec-foundation/blender-bonsai-ifcopenshell-sverchok-claude-skill-package/blender-syntax-data/Gen Agent Trust Hub
blender-syntax-data
Pass
Audited by Gen Agent Trust Hub on Mar 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues were detected. The skill consists of instructional markdown and Python code examples for the Blender API.
- [PROMPT_INJECTION]: No attempts to override agent behavior, bypass safety filters, or extract system prompts were found. The use of terms like 'CRITICAL' and 'NEVER' in the text pertains to legitimate Blender API constraints (e.g., not renaming the root scene collection).
- [DATA_EXFILTRATION]: No network operations, hardcoded credentials, or access to sensitive local file paths (like SSH keys or environment variables) are present. File operations are restricted to standard Blender file types (.blend and .cats.txt).
- [REMOTE_CODE_EXECUTION]: No remote scripts, external packages, or unverified dependencies are downloaded or executed. The skill requires an existing Blender installation with Python.
- [COMMAND_EXECUTION]: The code snippets use the standard Blender 'bpy' module and internal operators ('bpy.ops') for 3D data manipulation. No shell commands or arbitrary system code execution patterns were identified.
- [DYNAMIC_EXECUTION]: No use of 'eval()', 'exec()', or unsafe deserialization (e.g., 'pickle') was found. Logic is based on static API calls.
Audit Metadata